VIRT-SCENARIO-SETTINGS(1)

🎀 VIRT-SCENARIO-SETTINGS(1) 🎀

okay so bestie, this is the VIRT-SCENARIO-SETTINGS(1) page, and it’s basically a three-way vibe check for the same settings across Secure VM, Computation, and Desktop. the original serves this as tables; I’m giving you the exact same tea in bullet form so nothing gets lost. every value is kept, no cap. ✨

💾 Storage Settings 💾

the original section link is https://www.qemu.org/docs/master/system/qemu-block-drivers.html — iconic qemu block-driver lore.

• preallocation — Secure VM: metadata · Computation: off · Desktop: metadata
• encryption — Secure VM: on · Computation: off · Desktop: off
• disk_cache — Secure VM: writethrough · Computation: unsafe · Desktop: none
• lazy_refcounts — Secure VM: on · Computation: on · Desktop: off
• format — Secure VM: qcow2 · Computation: raw · Desktop: qcow2
• disk bus — Secure VM: virtio · Computation: virtio · Desktop: virtio
• capacity — Secure VM: 8G · Computation: 8G · Desktop: 8G
• cluster_size — Secure VM: 1024k · Computation: NA · Desktop: 1024k

🖥️ Host Settings 🖥️

• Transparent HugePages — link: https://documentation.suse.com/sles/15-SP2/html/SLES-all/cha-tuning-memory.html#sec-tuning-memory-thp — Secure VM: on · Computation: on · Desktop: on
• KSM — link: https://www.kernel.org/doc/html/latest/admin-guide/mm/ksm.html — Secure VM: disable · Computation: enable · Desktop: enable
• KSM merge across — link: https://www.kernel.org/doc/Documentation/vm/ksm.txt — Secure VM: disable · Computation: enable · Desktop: enable
• swappiness — link: https://www.kernel.org/doc/Documentation/vm/swappiness.txt — Secure VM: 0 · Computation: 0 · Desktop: 35
• IO Scheduler — link: https://documentation.suse.com/sles/15-SP4/html/SLES-all/cha-tuning-storage.html#sec-tuning-storage-scheduler — Secure VM: bfq · Computation: mq-deadline · Desktop: mq-deadline

🧸 Guest Settings 🧸

• CPU migratable — link: https://libvirt.org/kbase/launch_security_sev.html — Secure VM: off · Computation: off · Desktop: on
• machine — Secure VM: pc-q35-6.2 · Computation: pc-q35-6.2 · Desktop: pc-q35-6.2
• watchdog — link: https://libvirt.org/formatdomain.html#watchdog-devices — Secure VM: none · Computation: i6300esb poweroff · Desktop: none
• boot UEFI — link: https://libvirt.org/formatdomain.html#bios-bootloader — Secure VM: auto · Computation: auto · Desktop: auto
• vTPM — link: https://libvirt.org/formatdomain.html#tpm-device — Secure VM: tpm-crb 2.0 · Computation: none · Desktop: none
• iothreads — link: https://libvirt.org/formatdomain.html#io-threads-allocation — Secure VM: disable · Computation: 4 · Desktop: 4
• video — link: https://libvirt.org/formatdomain.html#video-devices — Secure VM: qxl · Computation: qxl · Desktop: virtio
• network — link: https://libvirt.org/formatdomain.html#network-interfaces — Secure VM: e1000 · Computation: virtio · Desktop: e1000
• keyboard — link: https://libvirt.org/formatdomain.html#input-devices — Secure VM: ps2 (will be disable in the futur) · Computation: virtio · Desktop: virtio
• memory backing — link: https://libvirt.org/formatdomain.html#memory-backing — Secure VM: off · Computation: memfd/shared · Desktop: memfd/shared
• mouse — Secure VM: disable · Computation: virtio · Desktop: virtio
• on_poweroff — link: https://libvirt.org/formatdomain.html#events-configuration — Secure VM: destroy · Computation: restart · Desktop: destroy
• on_reboot — Secure VM: destroy · Computation: restart · Desktop: restart
• on_crash — Secure VM: destroy · Computation: restart · Desktop: destroy
• suspend_to_mem — link: https://libvirt.org/formatdomain.html#power-management — Secure VM: off · Computation: off · Desktop: on
• suspend_to_disk — Secure VM: off · Computation: off · Desktop: on
• features — link: https://libvirt.org/formatdomain.html#hypervisor-features — Secure VM: acpi apic pae · Computation: acpi apic pae · Desktop: acpi apic pae
• host fs — link: https://libvirt.org/formatdomain.html#filesystems ; labels: fmode, dmode, source_dir, target_dir — Secure VM: NA · Computation: NA · Desktop: 644 755 /tmp/ /tmp/host

🔐 SEV 🔐

• kvm SEV — link: https://libvirt.org/kbase/launch_security_sev.html — Secure VM: mem_encrypt=on kvm_amd sev=1 sev_es=1 · Computation: NA · Desktop: NA
• sec cbitpos — Secure VM: auto · Computation: NA · Desktop: NA
• sec reducedPhysBits — Secure VM: auto · Computation: NA · Desktop: NA
• sec policy — Secure VM: auto · Computation: NA · Desktop: NA

okay that’s the whole scenario-settings buffet, bestie. cute footer sign-off: the original footer is literally () on one side and () on the other, so the source/version/date tea was not printed anywhere — no extra lore to spill. consider this your end-of-page sticker: () 💖 () — periodt. 🌈